Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9w8p-gv6j-vj3w

Опубликовано: 07 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.

EPSS

Процентиль: 52%
0.00293
Низкий

7.8 High

CVSS3

Дефекты

CWE-124

Связанные уязвимости

CVSS3: 7.8
nvd
больше 3 лет назад

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.

EPSS

Процентиль: 52%
0.00293
Низкий

7.8 High

CVSS3

Дефекты

CWE-124